PKI Specialist (Public Key Infrastructure)

PROJECT INFORMATION:Industry: BankingWork model: Hybrid (3/week in Warsaw/Łódź/Gdańsk/Gdynia)Remuneration: up to 155 PLN/h netto + VAT (B2B)Summary: This role focuses on leading the implementation of a global mandate in Bank to adjust Client Authentication from TLS public certificates, while also supporting digital certificate discovery.Main Responsibilities:Driving and implementing the global mandate regarding Client Authentication EKU removal from TLS public certificates.Implementation of solutions for inward and outward facing trust.Providing communication, support, and training for application teams and other areas of the bank as necessary.Discovering various digital certificates within the bank, including:Analyzing internal tools currently in use as well as potential external tools for discovery.Assessing discovered certificates, including types, non-compliances, and remediation proposals.Key Requirements:5+ years of experience in the IT industry with practical experience in the PKI area.Knowledge of public vs. private Certificate Authorities (CAs) and their respective trust chains and issuance policies.Understanding of TLS, particularly mutual TLS (mTLS), and validation of client certificates.Familiarity with operating systems and infrastructure components (networks, certificates, domains, etc).Analytical and problem-solving skills, capable of navigating complex technical environments.Planning skills to prevent service disruptions.Strong communication skills to articulate objectives and content clearly for diverse audiences.A collaborative team player attitude.Nice to Have:Experience with other cryptographic algorithms and key management systems.Other Details:Physical Location: Poland - Gdynia/Gdańsk/Warsaw/ŁódźRequired Language: English